Constantinescu Andrei Bogdan

Constantinescu Andrei Bogdan

Originally from Rm.Valcea , Romania.
Last known whereabouts was in Manchester, UK.

Mr Constantinescu is no stranger to police in Romania or to the FBI.
He seems to be a stranger to the authorities in the UK however.

Mr Constantinescu likes to place fake ads on the internet for automobiles and defraud victims in countries like Italy, Poland and the Czech Republic.
He ran the site (also listed below) http://trax-holdings.co.uk which is still active but seems to be abandoned.
The site has been reported to the web host (who has taken no action):
http://forum.aa419.org/viewtopic.php?t=37845
Domain name:
trax-holdings.co.uk

Registrant:
Samantha Mulligan

Registrant type:
UK Individual

Registrant's address:
The registrant is a non-trading individual who has opted to have their
address omitted from the WHOIS service.

Registrar:
Easily Limited t/a easily.co.uk [Tag = WEBCONSULTANCY]
URL: http://www.easily.co.uk

Relevant dates:
Registered on: 07-Aug-2009
Renewal date: 07-Aug-2011

Registration status:
Registered until renewal date.

Name servers:
dns0.easily.co.uk 212.53.77.27
dns1.easily.co.uk 212.53.64.31


asdtransports.com
dahore-holdings.com
dahore-holdings.co.uk
dds-holdings.co.uk
eps-holdings.com
ffs-holdings.co.uk
fss-holdings-express.com
klzholdings.com
klz-holdings.com
kmz-holding.com
oar-transport.com
pfy-holding.com
prm-holdings.com
rpm-holdings.co.uk
traxholdings.co.uk
trax-holdings.co.uk
wws-holdings.co.uk

YES I know many more scammers.....stay tuned.

Leia Mais…

109.235.49.65 Malware

The following domains are attempting to install malware from the IP 109.235.49.65

loginsiginsecureaccount.com
loginsiginsecureaccount.info
loginsiginsecureaccount.net
loginsiginsecureaccount.org
loginsiginsecureaccount.us
loginsiginwssecureeacc.com

Related details:
http://www.google.com/search?hl=en&rlz=1I7GGLD_en&q=109.235.49.65&btnG=Search&aq=f&aqi=&aql=&oq=&gs_rfai=

Leia Mais…

Romanian ATM Skimmers Arrested

http://www.diicot.ro/index.php?option=com_content&view=article&id=333:comunicat-de-presa-27052010&catid=38:mass-media&Itemid=81

PRESS RELEASE
27.05.2010 05/27/2010

Prosecutors Department for Organized Crime and Terrorism - Craiova Territorial Service investigating several people in terms of offense establishing a criminal organization, without the right access to a computer system, availability of computer data, possession of equipment payment instruments for counterfeiting, forgery of an electronic payment instrument and circulation of counterfeit payment instruments.



In fact, Note that the radius of Dolj County was formed an organized criminal group, with branches in Olt county and city Bucharest, specializing in computer crime offenses committed.
Electronics of skimming equipment were made especially in Chisinau and Bucharest Municipality mechanical components were made in Craiova, where parties make and assemble electronic and mechanical devices obtained were then sold to others or used by group members, especially in Italy.
On May 27, 2010, under authorization obtained by prosecutors DIICOT Is carried out searches at home in 38 buildings in Craiova, Jud. River (three buildings) and Bucharest Municipality (6 buildings).
At the headquarters D.I.I.C.O.T. Craiova Territorial Service will be led 20 people to interview.
Researches were carried out with police officers in BCCO Craiova BCCO Bucharest DCCO - SCCI and employees of the Romanian Gendarmerie and spirit.


http://www.diicot.ro/index.php?option=com_content&view=article&id=334:comunicat-de-presa2-27052010&catid=38:mass-media&Itemid=81

PRESS RELEASE 2
05/27/2010



Prosecutors Department for Organized Crime and Terrorism - Territorial Service Brasov seven defendants investigated for committing the crime of belonging to an organized criminal group in Criminal through computer systems and networks - has the equipment to counterfeit payment instruments electronic payment instruments, electronic forgery, attempted to carry out financial transactions fraudulently and blackmail.



In fact, it holds that, in early 2010, defendants Badila Mariean Aurel ink Lucian Marius Ciurea, Bularca Mircea Dumitru Constantin Teslaru Jones and Valentine have joined an organized criminal group, previously established, which acted in Romania and Italy, in order to obtain substantial amounts of money by using equipment for forging electronic payment instruments, the method used was skimming the site and withdraw money from accounts with credit cards clones.
In Romania were made or acquired devices used to perform electronic assemblies or reading data recorded on magnetic tape copy bank cards, such as "mouth of ATM and software used for the same purpose, and falsifying bank cards, such as" Exeba .
Artisanal equipment made in Italy were to be transported, installed ATMs, and after copying data from cards cloned and used to withdraw sums of money by members of the group.
Defendant charged Ţinteşan Calvin Note that, in late January 2010, amid problems with the registration of a car by exerting violence and threats of injured parties, won the amount of 3000 euros, the money is split with other members group.
In April 2010 and on May 25, 2010, under authorization obtained by prosecutors DIICOT Were carried out 17 searches in domiciliary buildings in Brasov, Constanta and Hateg, Hunedoara, during which totaled computers and equipment for counterfeiting credit cards, two firearms, side arms and risk drugs - hashish .
Prosecutors D.I.I.C.O.T. Brasov Territorial Service ordered 24-hour detention of defendants ink Lucian Marius Ciurea, Bularcă Mircea Dumitru Teslaru Ţinteşean Valentine and Calvin and proposed court for their arrest for 29 days and failing to arrest indicted Badila Aurel Constantin Mariean and Eugene, for 30 days.
In that case, on 17.04.2010, have ordered arrest of the other four defendants, members of the group, to form an organized criminal group, possession of equipment for counterfeiting and extortion of payment instruments.
Researches were carried out with technical support and Intelligence officers with police officers in BCCO Alba BCCO Constanta, Brasov and IPJ BCCO Brasov and employees of the Romanian Gendarmerie.
Research continues to documenting all criminal activities and criminal accountability of all participants.

http://www.diicot.ro/index.php?option=com_content&view=article&id=335:comunicat-de-presa3-27052010&catid=38:mass-media&Itemid=81

PRESS RELEASE 3
05/27/2010



Prosecutors Department for Organized Crime and Terrorism - Bacau Territorial Service ordered 24-hour detention of defendants Aaron Alexander, Edward Mazilu, Buta navigate, Farcas Johnny, Daiciu Alexander Nechifor Cornelius, Costel, and Antonache Mihai-Cristian Gafton Gabriel for offenses setting up an organized criminal group in Criminal through computer systems and networks.



In fact, notes that in 2009, defendant Aaron Alexander as leader, was indicted along with others, a criminal organization, with cross-border, specializes in manufacturing handicraft, marketing and operation of media devices to defraud electronic payment, unauthorized copying and transmitting data identification cards belonging mainly to foreigners, making fraudulent financial transactions in the virtual environment by using identification data cards for payment of services and the financial operation through fraudulent cash withdrawals from ATMs.
Group members acted both in Romania and abroad, particularly in Germany, UK, USA and the Netherlands.
On May 26, 2010, under authorization obtained by prosecutors DIICOT Were carried out searches at home in 10 buildings in the counties of Bacau and Neamt, during which they were removed by skimming devices and parts, electronic components, computer systems, ATM casts of some holes, 1,000 phone cards, SIM cards 160 issued by different mobile companies.
Prosecutors D.I.I.C.O.T. Bacau Territorial Service ordered 24-hour detention of the eight defendants and the court suggested their arrest for 29 days.
Researches were carried out with technical support DGIPI and with police officers in BCCO Bacau, Iasi, Alba and Brasov S.I.R. the I.P.J. Bacau and I.P.J. German and Mobile Gendarmes grouping employees Bacau.

Leia Mais…

aa419 DDOS Attack

http://www.aa419.org/ is currently under a DDoS attack.
(Distributed Denial of Service)
Explanation here:
http://en.wikipedia.org/wiki/Denial-of-service_attack
This also affects the forum:
http://forum.aa419.org/index.php
and Fake Bank Database.

Preliminary reports indicate the DDoS is coming from scammers who recently launched attacks on a German based blog:
http://autosec4u.forumieren.com/

As posted below in the comments area:

autosec4u said...
"The scammer contacted us, demanding we not publishing any new Shops or bank accounts he is using. Also he told us to remove a certain member from our team. Otherwise he will "ddos endlessly".
We basicly told him to eff off. Soon after we received a email with sites he is and will attack, mainly those who are found first on google. Amongst them aa419.org. The scammer is a kiddie from the german carders scene, attacks are via russia, c&c probably hosted at heihachi.net, webalta, wahome, 2x4.ru. "

The DDoS attack is coming from Russian servers and is a result of refusals to remove the posts on fake sites.

Here is a list of the fake sites that these scammers didn't want posted on
http://www.aa419.org/
and
www.autosec4u.info http://www.forum.autosec4u.info/
autosec4u.forumieren.com

gold-traum.com
gold-anonym-kaufen.com
gold-barren-silber.com
welt-gold.com
gold-im-trend.com
gold-truhe.com ,
gold-tuerkei.com
gold-experten.com
gold-erwerben.com
gold-handel24.com
gold-haus24.com
gold-kaufen24.com
gold-onlineshop.com
gold-versandhandel.com
gold-direkt.com
gold-direkthandel.com
gold-sicher-kaufen.com
gold-see.com
gold-zeit.com

McAfee Site Advisor has these sites listed with warnings.
Example:
http://www.siteadvisor.com/sites/gold-zeit.com/postid/?p=4691830

One of the scammers is using this email address:
Silvio Trulli dersilviode@yahoo.de supposedly belonging to a German male, 37 years of age:
He is using this IP address:
216.18.20.108

Here are threatening messages in German and English which the scammer sent to the Autosec4u sites:

hey

hier derhaha sicher dir bekannt.
ich werd eure ganzen mist seiten bis zum geht nicht mehr ddosen habe jetz so einen starken ddos den niemand aushalten wird.
Ich gebe dir eine vernüftige chance wenn du
a) dieselente aus dem forum entfernen tust
b keine shops und konten mehr veröffentlichen lässt
ich kann dir anbieten das du nach paar tagen wenn ich die shops gewechselt habe die shops posten kannst.
Alles was hier geschrieben wird bleibt unter uns und wenn du denkst das ich nur spass mache kannst du mich testen.Veröffentliche aufkeinenfall diese email sonst sind die verhanldung beendet.
ich hoffe wir werden uns einige

here derhaha sure you know.
I'll mist all over your pages is to no longer have to endure ddos ddos book now such a strong no one will.
I give you a chance if you are very sensible
dieselente a) remove from the forum do
b no shops and accounts can publish more
I can offer you that you can sit for few if I changed the shops, the shops post.
Everything that is written here remains among us and if you think I'm just fun you can email me testen.Veröffentliche aufkeinenfall this verhanldung otherwise have ended.
I hope we will get some


ihr volldeppen
niemand weiss was über mich auch nicht heihachi und heihachi sitzt auch irgendwo in russland und das geld schick ich immer auf ein Konto in russland von einem Konto was einem finanzagenten gehört den ich seid 2 jahren nutze also erspart euch alles.
Wo ich site?Ich sitze soeben in Büro mit meinem Laptop und nutze das Wlan von Polizei Xy das sind nämlich gute Freunde also bevor irgendwas gegen mich ist weiss ich schon längst bescheid und bin über alle Berge muhahaha
volldepppen


her volldeppen (idiots)
nobody knows what about me and not Heihachi Heihachi sits somewhere in russia and I always send money to an account from an account in russia what is a fiscal agent that I use two years are therefore spared you all things.
Where to site? I just sit in office with my laptop and use the wifi of the Xy police are in fact good friends before anything against me then I know has long been know and am over all the mountains muhahaha
volldepppen

More on these scammer's exploits here:

http://www.facto24.de/?p=2780

*English Translation*


Here is a new list of fake shops by these scammers.
All hosted on the same server by the scam friendly Heihachi Ltd:

Administrative Contact:
Heihachi LTD.
Andreas Mueller (support@heihachi.net)
+507.8321668
Fax:
Bruenner Strasse 32/2
Wien, AT 1210
AT

Technical Contact:
Heihachi LTD.
Andreas Mueller (support@heihachi.net)
+507.8321668
Fax:
Bruenner Strasse 32/2
Wien, AT 1210
AT

Registrant Contact:
Heihachi LTD.
Andreas Mueller ()

Fax:
Bruenner Strasse 32/2
Wien, AT 1210
AT



inetnum: 92.241.190.0 - 92.241.190.255
netname: HEIHACHI
descr: Heihachi Ltd
country: RU
admin-c: HEI668-RIPE
tech-c: HEI668-RIPE
status: ASSIGNED PA
mnt-by: RU-WEBALTA-MNT
changed: lexa@wahome.ru 20090908
source: RIPE

person: Andreas Mueller
address: Bella Vista, Calle 53, Marbella
address: Ciudad de Panama, Panama
remarks: Visit us under gigalinknetwork.com
remarks: ICQ 7979970
remarks: Dedicated Servers, Webspace, VPS, DDOS protected Webspace
remarks: Send abuse ONLY to: abuse@gigalinknetwork.com
remarks: Technical and sales info: support@gigalinknetwork.com
phone: +5078321458
abuse-mailbox: abuse@gigalinknetwork.com
nic-hdl: hei668-RIPE
mnt-by: WEBALTA-MNT
changed: support@gigalinknetwork.com 20100307
source: RIPE

% Information related to '92.241.160.0/19AS41947'

route: 92.241.160.0/19
descr: Wahome IP's =)
origin: AS41947
mnt-by: RU-WEBALTA-MNT
mnt-routes: GIGABASE-MNT
mnt-routes: RU-WEBALTA-MNT
changed: lexa@wahome.ru 20071218
source: RIPE

1. Apple-versandhandel.com
2. Barschi24.com
3. Billig-aber-gut.com
4. Deine-online-apotheke.com
5. Der-etwas-andere-sicherheitdienst.com
6. Edelmetall-experte.com
7. Elektro-direkthandel.com
8. Elektro-discounter.com
9. Elektro-grosshandel24.com
10. Elektro-outlet.com
11. Elektronik-direkthandel.com
12. Elektronik-discountler.com
13. Elektronik-master24.com
14. Elektronik-verkauf.com
15. Elektronikonlineshop.com
16. Es-geht-noch-billiger.com
17. Gargouri-goldversand.com
18. Geiz-bleibt-geil24.com
19. Geld-jobs.com
20. Gemeinsam-sparen.com
21. Gold-erwerb.com
22. Gold-jetzt-kaufen.com
23. Gold-kauf24.com
24. Gold-onlinekauf.com
25. Gold-profi.com
26. Gold-sofort-kaufen.com
27. Gold-versandshop.com
28. Goldmuenzen-verkauf.com
29. Hardware-versandhandel.com
30. Haushalt-shop.com
31. Job-helfer.com
32. Job-mails.com
33. Job-und-nebenjob.com
34. Jobs-online-finden.com
35. Jobs-online24.com
36. Lager-verkauf24.com
37. Lego-versand24.com
38. Luxus-sparen24.com
39. Media-shop-online.com
40. Motorradbekleidung2010.com
41. Mountainbike-fahrrad.com
42. Mu-bu.com
43. Nebenjob-jetzt-finden.com
44. Nebenjob-suche.com
45. Nebenjob-sucher.com
46. Nebenjobs-online-finden.com
47. Nebenverdienst-hier.com
48. Online-juwelier24.com
49. Online-markt24.com
50. Outlet-handel.com
51. Schmuck-versandhandel.com
52. Shop-infos.com
53. Testsieger-shop24.com
54. Hu-bu.com 0 listings
55. Jobs-direkt24.com
56. Juwelier-mit-herz.com
57. Juwelier-welt.com
58. Mein-elektronik.com
59. Nebenjob-portal24.com
60. Acer-notebooks-kaufen.com
61. Asus-notebooks.com
62. Bauknecht-gefriergeraete-hier.com
63. Bauknecht-gefriergerate.com
64. Bauknecht-waschmaschinen-infos.com
65. Bauknecht-waschmaschinen.com
66. Bep-bep.com
67. Canon-kamera-kaufen.com
68. Canon-spiegelreflexkamera.com
69. Delonghi-kaffeevollautomat.com
70. Ewe-ewe.com
71. Gefriergeraete-kuehl.com
72. Gefriergeraete-kuehlschranke.com
73. Kaffeevollautomaten-hier-kaufen.com
74. Kaffeevollautomaten-hier.com
75. Lcd-hier-kaufen.com
76. Lcd-jetzt-kaufen.com
77. Liebherr-kuehlschraenke-hier.com
78. Liebherr-kuehlschrank.com
79. Plasma-jetzt-kaufen.com
80. Spiegelreflex-hier-kaufen.com
81. Spiegelreflexkamera-hier.com
82. Vorwerk-thermomix-infos.com
83. Waschmaschinen-hier-bestellen.com
84. Waschmaschinen-hier.com

Leia Mais…

27 Romanian Scammers Arrested

Prosecutors from the Directorate for Investigating the Organized Crime and Terrorism –Territorial office Constanta have dismantled a criminal organized group specialized in computer fraud, and fraudulent operations with electronic payment instruments. The prosecutors are investigating 25 de defendants for constituting a criminal organized group, violation of art.7, Law 39/2003, counterfeiting electronic payment instruments, violation of art.24 al.2 Law 365/2002, conducting fraudulent financial operations, violation of art.27 al.1, 2 and. 3 Law 365/2002, for modifying without authorization computer data, violation of art.48 Law 161/2003 and for money laundering, violation of art.23 al.1 lit.b Law 656/2002.

Starting with October 2009, the defendants realized fake WebPages, clones of the WebPages of Bank of America and other banking institutions. They mass emailed links to these fake pages to users, customers of the targeted financial institutions.

These pages contained a fake warning to cancel or restrict the access and asking the customers to complete a form with personal information such as name, DOB, address, phone number, SSN, card number, expiring date, CVV2, pin code, etc.

After completion, the form was automatically transmitted to an email box especially created for this reason. The collected stolen private users information have been used by the suspects to initiate fraudulent Western Union online transfers from the accounts of foreign citizens.

The defendants have introduced in the Western Union computers used to conduct the online payment transactions, fake computer data having as result financial transfers from the bank accounts of US citizens. The money from the fraudulent transfers were picked up from Western Union offices from Constanţa, Viena – Austria, Munchen – Germania and Praga – Czech Republic.

Also the defendants distributed to other suspects the stolen private information to be also used in fraudulent financial operations.

On 10 Mai 2010 have been executed 36 search warrants, 2 in Bucharest, 32 in Constanta county and 2 in Harghita county. The police seized numerous computers and media devices.

27 persons have been brought at DIICOT –Teritorial office Constanta. la sediul D.I.I.C.O.T. – Serviciul Teritorial Constanţa. The operation have been conducted with the support of DGIPI and together with police officers from
I.G.P.R. - D.C.C.O., B.C.C.O. Bucureşti, B.C.C.O. Constanţa, S.C.C.O. Harghita şi S.C.C.O. Buzău and officers from B.S. I. J. Vlad Ţepeş, 300 officers in total.
The operation has been realized with the assistance of the US Secret Service agents from the US Embassy.

Official Press Release:

http://www.diicot.ro/index.php?option=com_content&view=article&id=320:comunicat-de-presa-10052010&catid=38:mass-media&Itemid=81

Translation:

*Click Here*



Another story:
http://www.euroavocatura.ro/stiri/4570/Perchezitii_la_locuintele_unor_suspecti_de_fraude_informatice__Prejudiciul_estimat_se_ridica_la_aproximativ_1_000_000_USD

Translation:
*Click Here*

Leia Mais…

Ghitan Aurelian

Ghitan Aurelian

Last known location:
Valcea
Rm. Valcea
Country: RO

http://myworld.ebay.com/aurelian.ro

Mr Ghitan was involved in the following fraud sites:
online-tradeservices.com
auto-securecentral.com
express-transports.com
globalshipexpress.com
my-stc.com

He also tried to start a supposedly legitimate escrow service:
escrow-romania.ro

In addition to the fraud sites, Mr Ghitan also was involved with other people in scams involving entering victims bank accounts in the UK and apparently withdrawing funds.

Leia Mais…

Ohio-Trucking.com

www.Ohio-Trucking.com
was a fake site created by a scammer who advertised a 2007 BMW Convertible - 2800$

His identity is revealed here:
http://netscammers.blogspot.com/2010/07/happy-4th-of-july.html

Previous fake shipping sites:
www.americafreight.net
www.absolute-shipping.com
www.absoluteshippings.com
www.absolute-moving.net
www.nc-shipping.com-dead

Here is what he's telling his intended victims
"please don`t try to insult
i`m a 49 yrs old man of a great honor"

This miscreant also has another clone fake shipping site on a hacked account.
http://extransi.com
The files for this site are located in a sub-directory of a hacked account:
http://74.54.103.219/~connectf/misc/.dtd
The hacked site is:
http://74.54.103.219/~connectf/
Front end for the hacked site is:
http://connectforkids.org/



The scammer is telling his intended victims that the car belonged to his now deceased son, who supposedly died in Afghanistan.
From the ad:
"This car it was my son`s car , he died in Afghanistan fighting our war ( Bush needs to tell me why ! ) this car will be a gift .. my gift in the memory of my son.... $4000 this is all you have to pay , shipping insurance and title transfer costs will be paid by me, all i want is to find the right person.. that person who`ll love and take care of this car in the same way he did... I'd like to make a person very happy and to light a candle for my son once in a while.... I live in Ohio my email is : anth4410@aol.com"

Use common sense.
If you think you can purchase a car of this calibre for $4,000 you are sadly mistaken.
No one in their right mind is going to "give away" this type of car with the BS story this scammer is posting.
The selling price for a 2007 BMW M6 convertible is between $50,000 and $60,000 in ads on line.
If this was a true ad and you go to register the car you're going to have to pay a state sales tax. Lets say the state you live in will accept a value of $50,000 on the car. This means you're going to have to pay about $3,000 for the taxes.
Realistically, you're also going to have to pay exorbitant insurance rates.
What seems to be a great deal is going to be very costly to the people that send the $4,000 asking price for something that doesn't exist.

The scammer is asking his intended victims to use MoneyGram for payment.

$4,000 money order must be made through MoneyGram ( Same-Day service ) to our company Lawyer`s name and address:

Name: Michael Spencer
Street: 1908 Canton Rd
City: Akron
State: OH
Zipcode : 44312
Country : USA

We all know that it is common for scammers to ask victims to use instant money transfers for purchases. If you send the money using this type of service you will never get it back after its picked up.

Don't be a victim.

Here is some information about this particular scammer's previous sites:
http://forum.aa419.org/viewtopic.php?t=18497

Here are images from his scams:




(He said his son died in Iraq this time)

Leia Mais…